[VulnDiscuss] Re: Minor bug in EF Commander

Hi,

sorry but all that you wrote here is not true! Reasons:
- no any 'buffer overflow' in EF Commander's FTP;
- the FTP from the EF Commander is a pure Client, no any data send to the
server, just the standard FTP commands, no any "ftp'ing to a dangerous site"
or other problems;
- if crashes how you mean, then must be terminated (Dr. Watson).

The only one possible problem is that you use a buggy Crack, binary changed
executable that crashes. You are not a registered user. I'm sure that you
are frustated that your crack don't works properly and wrote this here.

> If you fix this, please would you take the time to email
> [email protected], and state that you have provided a fix, and
include
> an URL where it can be downloaded.

Nothing to fix!

Regards
Dipl.-Ing. Emil Fickel



----- Original Message ----- 
From: "Peter Winter-Smith" <[email protected]>
To: <[email protected]>
Sent: Saturday, July 26, 2003 2:29 AM
Subject: Minor bug in EF Commander


> Hi,
>
> I regret to day that there appears to be a 'buffer overflow' bug in the
> buffer which holds the incoming data during an FTP session.
> This, allows the execution flow of the program to be altered to
potentially
> run code on a remote user, although it is not very likely, seeing as the
> malicious user would need to find out that a victim was using your
transfer
> client, and would also need to trick them to ftp'ing to a dangerous site,
a
> very unlikely situation.
>
> This would be replicated as follows:
>
> 220 [516 bytes A] : EBP & EIP = 0x41414141 ('AAAA').
>
> I would like to stress that you really needn't worry about this, but feel
> free to fix it if you feel that is a risk to any of your users, however I
> really do doubt that it would be, or could become one.
>
> If you fix this, please would you take the time to email
> [email protected], and state that you have provided a fix, and
include
> an URL where it can be downloaded.
>
> If you wish to speak to me about this, feel free to email me whenever you
> like, but I will be away for the forthcoming week (from tonight).
>
> Kindest regards,
> -Peter
>
> _________________________________________________________________
> Use MSN Messenger to send music and pics to your friends
> http://www.msn.co.uk/messenger
>
>